Live › vulnerability › CVE-2013-6282
Go to dashboardThe Linux kernel's get_user and put_user functions do not validate the target address on ARM v6k and v7 platforms. A local application can read and write kernel memory, which can lead to privilege escalation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| linux kernel | vendor | < 3.2.54 | 3.2.54 |
| linux kernel | vendor | >= 3.3, < 3.4.12 | 3.4.12 |
| linux kernel | vendor | >= 3.5, < 3.5.5 | 3.5.5 |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Apply the kernel update from your vendor or distribution that fixes CVE-2013-6282 (CISA: apply updates per vendor instructions).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.
This page as .md · .json · in your agent: get_signal("CVE-2013-6282")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.